#WhatsApp device linking abused in account hijacking attacks
BleepingComputer
WhatsApp device linking abused in account hijacking attacks
Threat actors are abusing the legitimate device-linking feature to hijack WhatsApp accounts via pairing codes in a campaign dubbed GhostPairing.
 #cybersecurity #Meta
#Cisco warns of unpatched #AsyncOS zero-day exploited in attacks
BleepingComputer
Cisco warns of unpatched AsyncOS zero-day exploited in attacks
​Cisco warned customers today of an unpatched, maximum-severity Cisco AsyncOS zero-day actively exploited in attacks targeting Secure Email Gatew...
 #cybersecurity
#BorderPatrol Bets on Small #Drones to Expand #US #Surveillance Reach
WIRED
Border Patrol Bets on Small Drones to Expand US Surveillance Reach
Federal records show CBP is moving from testing small drones to making them standard surveillance tools, expanding a network that can follow activi...
 #CBP #privacy #politics
#Sonicwall warns of new #SMA1000 zero-day exploited in attacks
BleepingComputer
Sonicwall warns of new SMA1000 zero-day exploited in attacks
SonicWall warned customers today to patch a vulnerability in the SonicWall SMA1000 Appliance Management Console (AMC) that was chained in zero-day ...
 #cybersecurity
#Bluesky launches a #privacy-focused β€˜Find Friends’ feature without invite spam
TechCrunch
Bluesky launches a privacy-focused 'Find Friends' feature without invite spam | TechCrunch
The Bluesky contact-matching feature is opt-in and your data won't be used to spam your friends, the social network says.
 #SocialMedia
Critical #React2Shell flaw exploited in #ransomware attacks
BleepingComputer
Critical React2Shell flaw exploited in ransomware attacks
A ransomware gang exploited the critical React2Shell vulnerability (CVE-2025-55182) to gain initial access to corporate networks and deployed the f...
 #cybersecurity #cybercrime
Browser extensions with 8 million users collect extended #AI conversations
Ars Technica
Browser extensions with 8 million users collect extended AI conversations
The extensions, available for Chromium browsers, harvest full AI conversations over months.
 #cybersecurity #malware
#UK MPs target VPNs in latest #OnlineSafetyAct debate
TechRadar
UK MPs target VPNs in latest Online Safety Act debate
The debate around age verification and VPNs heats up as MPs confirm their commitment to review the role these providers should have in preventing t...
 #privacy #politics #VPN #UKOSA #cybersecurity
#Cellik #Android #malware builds malicious versions from #Google Play apps
BleepingComputer
Cellik Android malware builds malicious versions from Google Play apps
A new Android malware-as-a-service (MaaS) named Cellik is being advertised on underground cybercrime forums offering a robust set of capabilities t...
 #cybersecurity
#GhostPoster attacks hide malicious #JavaScript in #Firefox addon logos
BleepingComputer
GhostPoster attacks hide malicious JavaScript in Firefox addon logos
A new campaign dubbed 'GhostPoster' is hiding JavaScript code in the image logo of malicious Firefox extensions counting more than 50,000...
 #cybersecurity #Mozilla #FOSS